*.armstrong-qa.edgenuityapp.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 07:4e:92:0c:e8:54:88:39:79:31:aa:87:ce:b3:66:43 was issued on by Amazon.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.armstrong-qa.edgenuityapp.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 07:4e:92:0c:e8:54:88:39:79:31:aa:87:ce:b3:66:43
Serial Number (int): 9712557379902926329844691477588043331
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: e8:19:0f:d1:4f:0f:25:ed:0f:c6:13:41:33:d7:90:05:24:a7:d6:6b
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): d2:fd:71:30:a4:76:0f:ea:bd:8b:41:0b:fb:41:9f:45:b5:77:04:06
Fingerprint (sha256): 4e:7d:60:ba:e6:a8:63:88:cf:dc:22:e0:84:c4:33:f7:84:2c:f8:62:29:ae:28:5c:c1:89:73:9d:e2:81:fa:dd

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate *.armstrong-qa.edgenuityapp.com

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.armstrong-qa.edgenuityapp.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.armstrong-qa.edgenuityapp.com
student-ilp-report.mp.qa.edgenuityapp.com
mpng-router.mp.qa.edgenuityapp.com
testbenchmarks.imaginelearning.com
class-summary-report.mp.qa.edgenuityapp.com
class-progress-report.mp.qa.edgenuityapp.com
mps-service-benchmarks.mp.qa.edgenuityapp.com
mpng-component-library.mp.qa.edgenuityapp.com
student.mp.qa.edgenuityapp.com
admin.mp.qa.edgenuityapp.com
student-progress-report.mp.qa.edgenuityapp.com

Other certificates including the domain name edgenuityapp.com

(limited to 100 certificates)
*.cosmos-prod.edgenuityapp.com
*.mptools-prod.edgenuityapp.com
*.cwng-staging.edgenuityapp.com
*.cwng-prod.edgenuityapp.com
*.cwng-prod.edgenuityapp.com
*.cwng-integrations-qa.edgenuityapp.com
*.lmsadmin-qa.edgenuityapp.com
*.licenseservice-dev.edgenuityapp.com
subscriptions-qa.edgenuityapp.com
*.armstrong-dev.edgenuityapp.com
*.assessment-service-mf-ui-dev.edgenuityapp.com
*.cwng-dev.edgenuityapp.com
*.lmsadmin-prod.edgenuityapp.com
*.edgelms-prod.edgenuityapp.com
subscriptions-staging.edgenuityapp.com
*.lmsadmin-prod.edgenuityapp.com
*.assessment-prod.il-apps.com
*.zoomservice-prod.edgenuityapp.com
*.rad-prod.edgenuityapp.com
*.strategicapps-staging.edgenuityapp.com
*.assessment-service-mf-ui-dev.edgenuityapp.com
*.assessment-dev.il-apps.com
*.armstrong-prod.edgenuityapp.com
*.assessment-prod.il-apps.com
*.lmsadmin-qa.edgenuityapp.com
*.cwng-integrations-prod.edgenuityapp.com
*.armstrong-staging.edgenuityapp.com
*.ow-qa.edgenuityapp.com
*.lmsadmin-dev.edgenuityapp.com
*.rad-prod.edgenuityapp.com
*.cwng-dev.edgenuityapp.com
*.lmsadmin-dev.edgenuityapp.com
*.cwng-prod.edgenuityapp.com
*.armstrong-qa.edgenuityapp.com
*.ow-prod.edgenuityapp.com
*.imlp-prod.edgenuityapp.com
*.imlp-prod.edgenuityapp.com
*.lmsadmin-qa-app.wna.cloud
*.strategicapps-staging.edgenuityapp.com
*.armstrong-prod.edgenuityapp.com
*.imlp-dev.edgenuityapp.com
*.cosmos-prod.edgenuityapp.com
*.edgelms-qa.edgenuityapp.com
*.cwng-integrations-prod.edgenuityapp.com
*.cwng-integrations-staging.edgenuityapp.com
*.lmsadmin-dev.edgenuityapp.com
*.licenseservice-prod.edgenuityapp.com
*.ops.wna.cloud
*.sequencer-prod.edgenuityapp.com
*.ow-prod.edgenuityapp.com
*.cwng-qa.edgenuityapp.com
*.mptools-prod.edgenuityapp.com
*.doolittle-production.wna.cloud
*.lmsadmin-prod.edgenuityapp.com
*.ow-prod.edgenuityapp.com
*.cwng-qa.edgenuityapp.com
*.cwng-integrations-prod.edgenuityapp.com
*.ow-prod.edgenuityapp.com
*.doolittle-production.wna.cloud
*.assessment-prod.il-apps.com
*.armstrong-dev.edgenuityapp.com
*.imlp-qa.edgenuityapp.com
*.lmsadmin-dev.edgenuityapp.com
*.strategicapps-qa.edgenuityapp.com
*.sequencer-prod.edgenuityapp.com
*.armstrong-qa.edgenuityapp.com
*.edgelms-prod.edgenuityapp.com
*.armstrong-prod.edgenuityapp.com
*.lmsadmin-prod.edgenuityapp.com
*.cwng-integrations-dev.edgenuityapp.com
*.sequencer-dev.edgenuityapp.com
*.cwng-dev.edgenuityapp.com
*.armstrong-prod.edgenuityapp.com
*.imlp-qa.edgenuityapp.com
*.cwng-dev.edgenuityapp.com
*.armstrong-qa.edgenuityapp.com
*.doolittle-production.wna.cloud
*.lmsadmin-dev.edgenuityapp.com
*.armstrong-prod.edgenuityapp.com
*.cwng-integrations-qa.edgenuityapp.com
*.ow-qa.edgenuityapp.com
*.doolittle-nonprod.wna.cloud
*.assessment-prod-app.wna.cloud
*.cwng-prod.edgenuityapp.com
*.lmsadmin-dev-app.wna.cloud
*.cwng-integrations-prod.edgenuityapp.com
*.cwng-integrations-prod.edgenuityapp.com
*.cwng-integrations-qa.edgenuityapp.com
*.strategicapps-qa.edgenuityapp.com
*.strategicapps-prod.edgenuityapp.com
*.imlp-prod.edgenuityapp.com
*.imlp-dev.edgenuityapp.com

Certificate

The complete raw certificate details for *.armstrong-qa.edgenuityapp.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGHTCCBQWgAwIBAgIQB06SDOhUiDl5MaqHzrNmQzANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAyMB4XDTI0MDUzMDAwMDAwMFoXDTI1MDYyODIzNTk1OVowKjEo
MCYGA1UEAwwfKi5hcm1zdHJvbmctcWEuZWRnZW51aXR5YXBwLmNvbTCCASIwDQYJ
KoZIhvcNAQEBBQADggEPADCCAQoCggEBAKaMIrJ0LZhxaiG58ZeLKqMEeHcBmd+5
Fg2YviQHmD4kH9hiZysJFZ/SVIodbR1cKjwczmyJ/bxODIqRInSpuRTu5tNqkg2s
OcEHhDXbV0VVMmFepGzmQYkwXdq+g+UW8YoziG9PSaK9Odbq8bHgYmxY8Fq86PgS
03v913/5JEHFv1lH3NIJe/vhvwM/UUSVSpC2Vq05u+PW0SoN3/HmjtvJcSptmzh5
0gFmNttbVL3xoIIbXAuJI5dRTT0mNXys96X0zpyLodWU6aW+oE57dDZGhO+eHmKk
X4U+o1m+VzVrrAqfNduYFkdpDBcTE7BGmFu3MiL08bdCHCt2LIo4968CAwEAAaOC
AyswggMnMB8GA1UdIwQYMBaAFMAxUs1aUMOCfHRxzsvpnPl664LiMB0GA1UdDgQW
BBToGQ/RTw8l7Q/GE0Ez15AFJKfWazCCAcgGA1UdEQSCAb8wggG7gh8qLmFybXN0
cm9uZy1xYS5lZGdlbnVpdHlhcHAuY29tgilzdHVkZW50LWlscC1yZXBvcnQubXAu
cWEuZWRnZW51aXR5YXBwLmNvbYIibXBuZy1yb3V0ZXIubXAucWEuZWRnZW51aXR5
YXBwLmNvbYIidGVzdGJlbmNobWFya3MuaW1hZ2luZWxlYXJuaW5nLmNvbYIrY2xh
c3Mtc3VtbWFyeS1yZXBvcnQubXAucWEuZWRnZW51aXR5YXBwLmNvbYIsY2xhc3Mt
cHJvZ3Jlc3MtcmVwb3J0Lm1wLnFhLmVkZ2VudWl0eWFwcC5jb22CLW1wcy1zZXJ2
aWNlLWJlbmNobWFya3MubXAucWEuZWRnZW51aXR5YXBwLmNvbYItbXBuZy1jb21w
b25lbnQtbGlicmFyeS5tcC5xYS5lZGdlbnVpdHlhcHAuY29tgh5zdHVkZW50Lm1w
LnFhLmVkZ2VudWl0eWFwcC5jb22CHGFkbWluLm1wLnFhLmVkZ2VudWl0eWFwcC5j
b22CLnN0dWRlbnQtcHJvZ3Jlc3MtcmVwb3J0Lm1wLnFhLmVkZ2VudWl0eWFwcC5j
b20wEwYDVR0gBAwwCjAIBgZngQwBAgEwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW
MBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8v
Y3JsLnIybTAyLmFtYXpvbnRydXN0LmNvbS9yMm0wMi5jcmwwdQYIKwYBBQUHAQEE
aTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5yMm0wMi5hbWF6b250cnVzdC5j
b20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQucjJtMDIuYW1hem9udHJ1c3QuY29t
L3IybTAyLmNlcjAMBgNVHRMBAf8EAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0G
CSqGSIb3DQEBCwUAA4IBAQCpU7db653VCOLA+kabssixRtuUBN3XRfAAGiEG/OaE
1BBOOPzQOBLqHA3V5WLADaxadmMYUFIotZpWfBzSnMBxukzC9bGw16n/rmUiUSHX
q+bDi20QNWbJXA6OA+CsNVUdP1usw3MTWvgqxyQu2WTmMeNwhdxOlRHN91mDUZFj
lXZLR6si5a1MRc2dMwfsWtejvhogQ3Bj4ChQ0VjHTrRFeeagvzUKjFeYwmdgf2HH
ZKrhhQY3oGgv6vaGMCGZkPWYatPuCMvPMgc5Yl1uuhwOK1SV0EJ9i5YRwijl8Y9t
XwDS7O6YctLvQ9fcn5+PfrI6OzlEQbKnzdoPeS4dHwIv
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApowisnQtmHFqIbnxl4sq
owR4dwGZ37kWDZi+JAeYPiQf2GJnKwkVn9JUih1tHVwqPBzObIn9vE4MipEidKm5
FO7m02qSDaw5wQeENdtXRVUyYV6kbOZBiTBd2r6D5RbxijOIb09Jor051urxseBi
bFjwWrzo+BLTe/3Xf/kkQcW/WUfc0gl7++G/Az9RRJVKkLZWrTm749bRKg3f8eaO
28lxKm2bOHnSAWY221tUvfGgghtcC4kjl1FNPSY1fKz3pfTOnIuh1ZTppb6gTnt0
NkaE754eYqRfhT6jWb5XNWusCp8125gWR2kMFxMTsEaYW7cyIvTxt0IcK3Ysijj3
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9712557379902926329844691477588043331
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.armstrong-qa.edgenuityapp.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21024662032434749122743712390782704957294620884483513930296486842304589881502220538221495499059802772007232572680942767170212501578490556866103929269991645306973962950314728835852527153796946817945833668553526474748045109300909023886473254829578868875090177751433989327216159283717538826489505055727847085549427704158774114198684223477167190056352906195914837861830632062770378963201806150509207610598103916076646367172663193968395276157902023381378115152784254377736744737942705759241232155595792901219921678322384148527645641708768454128748472573168014387739080304063715994117748639488172769733970282789345557018543
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e8190fd14f0f25ed0fc6134133d7900524a7d66b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (447 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.armstrong-qa.edgenuityapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'student-ilp-report.mp.qa.edgenuityapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mpng-router.mp.qa.edgenuityapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testbenchmarks.imaginelearning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'class-summary-report.mp.qa.edgenuityapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'class-progress-report.mp.qa.edgenuityapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mps-service-benchmarks.mp.qa.edgenuityapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mpng-component-library.mp.qa.edgenuityapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'student.mp.qa.edgenuityapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mp.qa.edgenuityapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'student-progress-report.mp.qa.edgenuityapp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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